David McMahon
ef0c9f0c5b
Remove "All rights reserved" from all the headers.
2016-06-29 17:47:36 -07:00
Paul Weil
4970f0c02d
PSP admission
2016-05-11 18:07:36 -04:00
Kevin
b7014561c1
Add admission controller to limit pod anti affinity topologykey to node level
2016-05-09 12:23:41 +00:00
Justin Santa Barbara
f9a6ac077e
Ubernetes Lite: Volumes can dictate zone scheduling
...
For AWS EBS, a volume can only be attached to a node in the same AZ.
The scheduler must therefore detect if a volume is being attached to a
pod, and ensure that the pod is scheduled on a node in the same AZ as
the volume.
So that the scheduler need not query the cloud provider every time, and
to support decoupled operation (e.g. bare metal) we tag the volume with
our placement labels. This is done automatically by means of an
admission controller on AWS when a PersistentVolume is created backed by
an EBS volume.
Support for tagging GCE PVs will follow.
Pods that specify a volume directly (i.e. without using a
PersistentVolumeClaim) will not currently be scheduled correctly (i.e.
they will be scheduled without zone-awareness).
2015-12-31 12:27:01 -05:00
Andy Goldstein
f175a22443
Add admission controller to force image pulls
...
Add an admission controller that forces every container's image pull policy to
Always when a pod is created.
2015-12-22 10:32:40 -05:00
Paul Weil
ed80c2b940
pid mode
2015-09-15 13:51:44 -04:00
Piotr Szczesniak
7967642cf0
Implemented first version of InitialResources plugin.
2015-09-01 17:24:13 +02:00
Bryan Stenson
9541414742
create cloudprovider "providers" package
...
move all providers into new package
update all references to old package path
2015-08-11 22:36:51 -07:00
Mike Danese
8e33cbfa28
rewrite go imports
2015-08-05 17:30:03 -07:00
Cesar Wong
e95d9c416d
Admission control to prevent exec on privileged pods
2015-05-21 13:56:51 -04:00
David Oppenheimer
7a21d7ab1f
Merge pull request #8053 from jdef/upstream_mesos_cloud
...
integrate mesos cloud provider with k8s proper
2015-05-14 13:57:39 -07:00
James DeFelice
652c14d8d7
integrate mesos cloud provider into kube apps
2015-05-12 16:02:38 +00:00
Jordan Liggitt
7e14a80f63
ServiceAccount admission plugin
2015-05-11 17:18:06 -04:00
Zach Loafman
875e83a741
Revert "Revert "Security context - types, kubelet, admission""
2015-05-05 16:02:13 -07:00
Zach Loafman
f48904fd5e
Revert "Security context - types, kubelet, admission"
2015-05-05 15:20:39 -07:00
Paul Weil
982bf19c20
security context initial implementation - squash
2015-05-05 13:46:13 -04:00
Eric Paris
6b3a6e6b98
Make copyright ownership statement generic
...
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
2015-05-01 17:49:56 -04:00
derekwaynecarr
9bd7f05ffc
Remove ResourceDefaults plugin
2015-03-31 10:05:28 -04:00
derekwaynecarr
8aa807bc33
NamespaceLifecycle admission control plugin
2015-03-20 13:23:49 -04:00
Tim Hockin
899d30f16a
move pkg/master/server to cmd/kube-apiserver/app
2015-02-20 08:49:12 -08:00